Skip to content

SailPoint Entro API Key

Service Name: SailPoint Entro

Service Description: SailPoint Entro is a platform that helps organizations discover, validate, and manage secrets across their infrastructure. It provides tools for detecting exposed credentials and ensuring secure secret management.

Service Address: https://entro.security/

Validation Type: API Auth

IP Allow list: Does not exist

Secret Access Scope: Grants access to Entro Security's API services, allowing users to perform scans and manage secrets.

Secret Revokement URL: Does not exist

Secret Example: ent_ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789ABCDEFGHIJKLM==

Suspicious Activity Investigation Instructions:

  • Review Entro Security dashboard for unauthorized scan activities
  • Check API logs for unusual access patterns or unauthorized IP addresses
  • Monitor for unexpected changes to scan configurations or settings
  • Verify that API calls are coming from authorized applications and services

Mitigation Instructions:

  • Rotate the compromised API key immediately through the Entro Security dashboard
  • Generate a new API key with appropriate permissions
  • Update all applications and services using the old key with the new one
  • Review and adjust access permissions for the new API key as needed
  • Implement IP restrictions for API access if possible